Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/323430353a363263303a3a2f33322d3438203d3e20313339343138.roa
File: 323430353a363263303a3a2f33322d3438203d3e20313339343138.roa (raw, json)
Hash identifier: izqKiDLec1vZUK7grWMpcnfd/BiUYWcFl+SV4rzuoHE=
Subject key identifier: 4B:58:AE:F7:19:8B:26:5E:76:1F:98:FE:B8:12:A0:A4:0E:B3:BA:BF
Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5
Certificate serial: 7EE33B4F305A928C5F712B6FA0A9CA5540109141
Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/323430353a363263303a3a2f33322d3438203d3e20313339343138.roa
Signing time: Sat 26 Aug 2023 04:00:02 +0000
ROA not before: Sat 26 Aug 2023 03:55:02 +0000
ROA not after: Sat 24 Aug 2024 04:00:02 +0000
asID: 139418
IP address blocks: 2405:62c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e3:3b:4f:30:5a:92:8c:5f:71:2b:6f:a0:a9:ca:55:40:10:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5
Validity
Not Before: Aug 26 03:55:02 2023 GMT
Not After : Aug 24 04:00:02 2024 GMT
Subject: CN=4B58AEF7198B265E761F98FEB812A0A40EB3BABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:9d:d7:46:66:a1:3a:ff:4c:0f:8d:89:63:
5c:27:16:15:d3:ee:b5:35:52:77:8c:74:17:e7:26:
aa:c3:45:19:f5:5c:70:ae:8e:94:ee:a8:56:64:21:
39:4c:15:cf:1b:1f:b1:75:8f:40:f5:ec:0d:55:c8:
6d:40:11:c9:04:53:46:97:07:21:f4:ac:c3:72:cd:
85:b9:a8:50:83:03:0a:ef:e9:30:5b:41:97:d9:e4:
41:d9:f3:c1:5d:9a:0a:60:c5:23:22:d2:7a:b5:5b:
d9:23:5b:84:af:f9:d3:06:46:0c:f0:09:77:6f:ee:
1c:12:51:cf:3c:ed:1a:a7:d2:11:6b:10:1f:51:53:
0c:51:7e:08:f2:b6:59:ba:c4:0b:88:e6:2b:28:ce:
0a:1e:8e:42:5e:f8:6d:66:60:fd:98:27:63:52:5e:
37:70:95:5b:66:b7:71:b5:7c:b4:95:e2:9f:f6:72:
d5:7c:e3:a5:8d:c1:a4:d4:0e:d8:04:24:9b:6b:10:
1d:c3:30:af:f8:07:2e:70:53:de:7f:cf:04:12:eb:
de:40:44:42:77:99:25:33:e7:df:4b:31:aa:3e:f1:
e5:a9:ef:2f:fa:98:38:b5:60:74:c7:95:e6:53:81:
6a:83:6c:c6:d3:64:7c:75:ac:34:79:cb:97:7c:33:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:AE:F7:19:8B:26:5E:76:1F:98:FE:B8:12:A0:A4:0E:B3:BA:BF
X509v3 Authority Key Identifier:
keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/323430353a363263303a3a2f33322d3438203d3e20313339343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:82:01:22:ef:e1:c0:65:4f:f5:dd:7b:47:a2:f3:49:f7:96:
ff:5a:26:a0:1a:9d:f3:e9:e5:47:0f:97:19:9a:3b:e1:15:7b:
c6:e5:b6:bb:8b:93:11:d9:83:a4:32:e6:06:a4:cb:24:d8:f3:
19:db:26:ee:2c:fe:83:d5:2c:9a:3d:3e:0d:7e:71:44:64:83:
7a:c6:ec:a8:ca:bb:76:4c:34:96:6d:03:36:16:70:24:6f:78:
90:bf:b7:85:85:2f:6c:9e:99:bd:a4:f0:da:ba:bc:55:04:51:
e3:8b:51:cb:70:70:27:a3:f3:e9:1e:3e:db:7c:a4:e6:58:65:
d3:8f:7f:a5:17:4a:f8:6e:83:f3:5c:ef:d2:24:99:4f:57:28:
3d:9c:bc:e5:fb:7a:c1:61:c3:ef:83:c3:81:32:9c:23:4f:70:
54:9d:c7:a8:1e:4f:be:24:67:2e:a8:f5:70:8a:e1:11:95:e1:
8f:4d:21:d7:6b:b1:d7:19:3e:ff:c7:6a:2a:d5:1b:da:2e:68:
06:cb:ff:44:53:17:25:52:77:b4:ce:28:15:3a:76:98:4d:16:
87:8c:ef:19:b1:0e:d9:f5:e8:f8:f3:81:f2:5c:74:a1:f1:86:
34:fe:22:54:b1:43:a6:cf:fe:01:3e:c9:be:1f:28:3b:94:53:
44:f5:17:ce
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUfuM7TzBakoxfcStvoKnKVUAQkUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4
OTVCMDdBNTAeFw0yMzA4MjYwMzU1MDJaFw0yNDA4MjQwNDAwMDJaMDMxMTAvBgNV
BAMTKDRCNThBRUY3MTk4QjI2NUU3NjFGOThGRUI4MTJBMEE0MEVCM0JBQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpp3XRmahOv9MD42JY1wnFhXT
7rU1UneMdBfnJqrDRRn1XHCujpTuqFZkITlMFc8bH7F1j0D17A1VyG1AEckEU0aX
ByH0rMNyzYW5qFCDAwrv6TBbQZfZ5EHZ88FdmgpgxSMi0nq1W9kjW4Sv+dMGRgzw
CXdv7hwSUc887Rqn0hFrEB9RUwxRfgjytlm6xAuI5isozgoejkJe+G1mYP2YJ2NS
XjdwlVtmt3G1fLSV4p/2ctV846WNwaTUDtgEJJtrEB3DMK/4By5wU95/zwQS695A
REJ3mSUz599LMao+8eWp7y/6mDi1YHTHleZTgWqDbMbTZHx1rDR5y5d8M/7ZAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUS1iu9xmLJl52H5j+uBKgpA6zur8wHwYDVR0j
BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx
QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC
MDdBNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkNTk4ZTk5LWU5ZmYtNGFiZS1i
MDhlLTIyNmZkZDA3ZjlhZS8wLzMyMzQzMDM1M2EzNjMyNjMzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzOTM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFYsAwDQYJKoZI
hvcNAQELBQADggEBAACCASLv4cBlT/Xde0ei80n3lv9aJqAanfPp5UcPlxmaO+EV
e8bltruLkxHZg6Qy5gakyyTY8xnbJu4s/oPVLJo9Pg1+cURkg3rG7KjKu3ZMNJZt
AzYWcCRveJC/t4WFL2yemb2k8Nq6vFUEUeOLUctwcCej8+kePtt8pOZYZdOPf6UX
Svhug/Nc79IkmU9XKD2cvOX7esFhw++Dw4EynCNPcFSdx6geT74kZy6o9XCK4RGV
4Y9NIddrsdcZPv/HairVG9ouaAbL/0RTFyVSd7TOKBU6dphNFoeM7xmxDtn16Pjz
gfJcdKHxhjT+IlSxQ6bP/gE+yb4fKDuUU0T1F84=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:47 2025 by rpki-client